Solaris 7/8/9 CDE libDtHelp - Buffer Overflow Non-Exec Stack Privilege Escalation Exploit

zdt · 2016-11-08

Description

Solaris CDE libDtHelp Buffer Overflow Exploi

Entry point

ParameterDTHELPSEARCHPATH · nested

Path/usr/dt/bin/dtprintinfo

Buffer overflow vulnerability in libDtHelp enabled via environment variables referenced by the Help feature.

Affected software

Sco Open Unix= 8.0

Sco Unixware= 7.1.1, 7.1.3

All known vulnerabilities by product

Cde Libdthelp Library

CVSS 7.2 for CVE-2003-0834

7.2

HIGH SEVERITY

VectorAV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/

EPSS Score

1.2%higher than 64.6% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2016-11-08 00:00

Last Seen:2018-03-13 20:36

Reporter:Marco Ivaldi

Tags

solariscdebuffer overflowprivilege escalationexploitlinux platformlocal exploits

Other exploits for CVE-2003-0834

2026-08-24 KitPloitKITPLOIT

Solaris 7/8/9 CDE libDtHelp - Buffer Overflow dtprintinfo Privilege Escalation Exploit

2016-11-08 Marco IvaldiZDTC

Solaris 7/8/9 CDE LibDTHelp - Local Buffer Overflow Exploit (2)

2014-07-01 RootSEEBUG

Solaris 7/8/9 CDE LibDTHelp Local Buffer Overflow Exploit

2008-07-16 RootSEEBUG

Solaris 7/8/9 CDE LibDTHelp Local Buffer Overflow Exploit (2)

2006-10-28 RootSEEBUG

Solaris 7/8/9 CDE LibDTHelp Local Buffer Overflow Exploit

2004-12-24 Marco IvaldiZDTC

Solaris 7/8/9 CDE LibDTHelp Local Buffer Overflow Exploit (2)

2004-12-24 Marco IvaldiZDTC

Solaris 789 CDE LibDTHelp - Local Buffer Overflow (1)

2004-12-24 Marco IvaldiEXPLOITPACKC

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=1337DAY-ID-26269
Exploit for linux platform in category local exploits